Overview

overview

10

Static

static

10

b93b5cc63a...74.exe

windows7-x64

10

b93b5cc63a...74.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b93b5cc63a5ee1981c074abb7921a4bdb147197dc85dd1af42305066736d8574.exe

  • Size

    3.4MB

  • MD5

    61a23a5c02f19dda41b5f63b48784a96

  • SHA1

    def21ab5c10bf3b4e5a5d2b2abb5d00b8e2dea18

  • SHA256

    b93b5cc63a5ee1981c074abb7921a4bdb147197dc85dd1af42305066736d8574

  • SHA512

    2e210707c58c71aa20a6ddffd95b83fd5c61e039a4201a807409ad1570c4650bb6549e85bb161631ccae26e310799379864e1b3c090145d103f1a6bdc9573cf4

  • SSDEEP

    49152:XvulL26AaNeWgPhlmVqvMQ7XSKeK8FEzUkk/bZLoGd5YTHHB72eh2NT:XveL26AaNeWgPhlmVqkQ7XSKH8tp

Score
10/10
kasperskyquasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

Kaspersky

C2

mmdrza.ddns.net:25565

Mutex

fba445f3-0d80-4a93-bed3-c92c762015fc

Attributes
  • encryption_key

    953F5906F7FC4FE5000EA40834065AE361109E51

  • install_name

    kaspsersky32.exe

  • log_directory

    Failture logs

  • reconnect_delay

    3000

  • startup_key

    Kaspersky auto update

  • subdirectory

    Kaspersky

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b93b5cc63a5ee1981c074abb7921a4bdb147197dc85dd1af42305066736d8574.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections